Additionally a bump to grunt-image and grunt itself for security reasons. Also, commit package-lock.json, which is what we do now. Change-Id: I2beab15d7f5b1453ccbb3c46b6dd0800c78ed15b